Limiting outgoing calls to a group

[fearless.rabbit]

This is probably a routine task for many of you, but my telephony knowledge is very thin, even though I`m the only one in the company administering it :-/ So I appologize in advance.

CCME 8 with around 150 IP phones (6921s and 6941s). I`d like to create and limit outgoing calls to a group of ~15 phones. All outgoing calls are blocked, except 2 mobile phones. They still should be able to communicate internally. Communication with the rest of the network is optional - would be neat to saw off that branch as well.

This group is group of retail shop phones, and we dont want shop workers to dial anything else beside their managers (2 mobile phones) and other stores.

Please point me in right direction Thank you!

[Ayodeji Okanlawon]

As simple as it sounds, its not that easy to implement on CCME. You need to use cor lists to create the restrictions.

Here is an excellent link on how to configure COR (class of restrictions)

http://www.cisco.com/en/US/tech/tk652/tk90/technologies_configuration_example09186a008019d649.shtml

Please rate all useful posts

"'Nature is too thin a screen, the glory of the omnipresent God bursts through it everywhere"-Ralph Waldo Emerson

[fearless.rabbit]

Thank you very much! I will read through it, and ask in this same topic if I have any further questions

[Ayodeji Okanlawon]

Milos,

You are most welcome and we will be glad to help you should you need further assistance

Please rate all useful posts

"'Nature is too thin a screen, the glory of the omnipresent God bursts through it everywhere"-Ralph Waldo Emerson

[fearless.rabbit]

One question if I may. I never configured dial-peers myself (I see them as voice static routes..), so I already have them in place. What Im not sure about is should I create new ones for these two specific mobile numbers, and "stick" COR to them?

Thank you,

Milos

[Ayodeji Okanlawon]

You will need to implement it on the dial-peers. The dial-peer you shouldnt apply it to is the one for the mobile phones. If you send your router config (sh run) I can help you with the config.

Please rate all useful posts

"'Nature is too thin a screen, the glory of the omnipresent God bursts through it everywhere"-Ralph Waldo Emerson

[fearless.rabbit]

You are a life savior! Here a portion of the config with dial-peers:

dial-peer voice 11 pots

description === izlazni 112 poziv ka Telekomu ===

destination-pattern 112

port 0/0/0:15

forward-digits 3

!

dial-peer voice 12 pots

description === izlazni pozivi ka Telekomu - razne sluzbe 1 ===

destination-pattern 12[2-6,8]

port 0/0/0:15

forward-digits 3

!

dial-peer voice 13 pots

description === izlazni pozivi ka Telekomu - razne sluzbe 2 ===

destination-pattern 1....

port 0/0/0:15

forward-digits 4

!

dial-peer voice 14 pots

description === izlazni pozivi ka Telekomu - taksi sluzbe ===

destination-pattern 19...

port 0/0/0:15

forward-digits 5

!

dial-peer voice 20 pots

description === izlazni pozivi ka Telekomu - gradski poziv ===

destination-pattern [2-8].....

port 0/0/0:15

forward-digits 6

!

dial-peer voice 21 pots

description === izlazni pozivi ka Telekomu - medjugradski poziv ===

destination-pattern 0[2-5].......

port 0/0/0:15

forward-digits 9

!

dial-peer voice 22 pots

description === izlazni pozivi ka Telekomu - mobilne mreze ===

destination-pattern 06[3,7-9].......

port 0/0/0:15

forward-digits 10

!

dial-peer voice 25 pots

description === izlazni pozivi ka Telekomu - medjunarodni poziv ===

destination-pattern 00T

port 0/0/0:15

prefix 00

!

dial-peer voice 3 voip

clid strip

!

dial-peer voice 30 voip

destination-pattern 9997..

session target ipv4:172.18.1.99

dtmf-relay h245-alphanumeric

no vad

!

dial-peer voice 26 pots

description === izlazni pozivi ka Telekomu - all ===

destination-pattern .T

port 0/0/0:15

!

dial-peer voice 700 voip

destination-pattern 7...

session target ipv4:172.18.1.99

!

dial-peer voice 8555 voip

destination-pattern 8555

session target ipv4:10.50.255.254

!

!

num-exp 600... 660...

!        

!

gatekeeper

shutdown

!

!

telephony-service

max-ephones 365

max-dn 300

ip source-address 192.168.219.5 port 2000

caller-id block code *1234

timeouts interdigit 3

system message porto montenegro

load ata ATA030203SCCP051201A.zup

load 6921 SCCP69xx.8-5-3-0.loads

load 6941 SCCP69xx.8-5-3-0.loads

load 6961 SCCP69xx.8-5-3-0.loads

load 6901 SCCP6901.9-0-2-0.loads

load 6911 SCCP6911.9-0-2-0.loads

max-conferences 8 gain -6

moh flash:/music-on-hold.au

web admin system name admin secret 5 $1$fCZ/$POPmTbYIuUjCwxMXZVRd3.

dn-webedit

transfer-system full-consult

create cnf-files version-stamp 7960 Jun 23 2011 11:51:28

So I guess I`ll have to create new dial-peers for these two mobiles? One dial-peer per one mobile number? Lets assume number is 067628086.

I can not thank you enough

[Ayodeji Okanlawon]

Milos,

Ok here we go...

Requirement

1. 15 phones are giving full access

2. All phones can call 2 mobile numbers

3. All other outside calls from phones are blocked

1.  We create dial-peer cor custom to define how we will apply cor to dial-peers

Dial−peer cor custom

name Full_Access

name Allowed_Mobile

2. We create the list of restrictions that apply to the dial-peers

dial-peer cor list FullAccess

member Full_Access

member Allowed_Mobile

dial-peer cor list Restricted

memeber Allowed_Mobile

3. Apply the corlist to the relevant outbound dial-peer

e.g

dial-peer voice 25 pots

corlist outgoing FullAccess

dial-peer voice 26 pots

corlist outgoing FullAccess

NB: Apply this to all the other dial-peers you want to restcrict access to.

4. Apply the ff: to the two mobile numbers you want to give access to: I suggest you create a different dial-peer to match those two numbers

e,g dial-peer voice 40 pots

destination-pattern 063788888 (chnage this to the mobile number you want to give access to)

corlist outgoing Restricted

5. Finally assign cor list  to the ephoens/ephone-dns you want to give access to and want to restrict.

e.g

ephone1-----------------------This will be one of the 15 phones you want to give full access to

corlist incoming FullAccess

ephone 2--------------------------This will be the other phones.

corlist incoming Restricted

I like people by the name Milos. My boss 's name is Milos and he is a good man

Please rate all useful posts

"'Nature is too thin a screen, the glory of the omnipresent God bursts through it everywhere"-Ralph Waldo Emerson

[fearless.rabbit]

Im off to try it out! Requirements are a bit different, but I think I got the logic. Group of 15 is going to be limited only to those two mobiles; everyone else will have full priviledges.

Milos thanks!

[fearless.rabbit]

Ok, so I took a test phone, created a test dn 21, and tried it out. I still can call whoever I want from this test phone. Here`s what I did:

Created just one cor list:

ISR3945(config)#dial-peer cor custom

ISR3945(config-dp-cor)#name Restricted

ISR3945(config-dp-cor)#dial-peer cor list Restricted

ISR3945(config-dp-corlist)#member Restricted

ISR3945(config-dp-corlist)#exit

Applied it to new dial-peer:

ISR3945(config)#dial-peer voice 40 pots

ISR3945(config-dial-peer)#destination-pattern 067628086

ISR3945(config-dial-peer)#corlist outgoing Restricted

Created a test dn:

ISR3945(config)#ephone-dn 21 dual

ISR3945(config-ephone-dn)#number 661021

ISR3945(config-ephone-dn)#name Milos

ISR3945(config-ephone-dn)#label Milos

ISR3945(config-ephone-dn)#desc Milos

ISR3945(config-ephone-dn)#cor incoming Restricted

ISR3945(config-ephone-dn)#exit

ISR3945(config)#ephone 30

ISR3945(config-ephone)#button 1:21

ISR3945(config-ephone)#restart

restarting C89C.1DB5.C4BA

I left everything else untouched. All other dial-peers are unchanged, and only Restricted cor is created. I can still call whatever I want from this device. What am I missing? The plan is to block everything except 067628086 number.

[Ayodeji Okanlawon]

Milos,

I will be away fro a few hours, I will respond when I get back..Dont worry we will sort this out..

Please rate all useful posts

"'Nature is too thin a screen, the glory of the omnipresent God bursts through it everywhere"-Ralph Waldo Emerson

[fearless.rabbit]

I think I troubleshooted myself

First of all, I did not configure dial-peer 40 completely, so I added these two lines:

ISR3945(config-dial-peer)#port 0/0/0:15

ISR3945(config-dial-peer)#forward-digits 10

Then, I created another cor called Allowed, and "sticked" it to all other existing dial-peers. So basically, all dial-peers have Allowed, and dial-peer 40 has Restricted cor. Just the dn-s I want blocked have Restricted, others are cor-free.

So I believe Im close to wrapping this thing up, but I have one final question: Can multiple phone numbers be listed as multiple destination patterns in the same dial-peer? Or I have to create new dial-peers for individual numbers, and keed adding Restricted cor to it?

[Ayodeji Okanlawon · Accepted solution]

Glad you are figuring it out..Thats the point of learning. Yes you cant leave all other dial-peers without cor applied to them, cor wont take effect as you have seen.

Yes you can add multiple destination to a dial-peer

eh

destination-pattern 0676280..

will match 100 numbers 0676280.........067628099

So you can use the . as a wildmask for other numbers

Please rate all useful posts

"'Nature is too thin a screen, the glory of the omnipresent God bursts through it everywhere"-Ralph Waldo Emerson

[fearless.rabbit]

Im immensely grateful! Thanks again

[Ayodeji Okanlawon]

Thanks for the nice rating and good Luck.

Please rate all useful posts

"'Nature is too thin a screen, the glory of the omnipresent God bursts through it everywhere"-Ralph Waldo Emerson